Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa
File:                     65d13b94-4668-32fe-a649-06eebd3ad2ab.roa (raw, json)
Hash identifier:          lBl7tVptf3rwekMPRIodfZDh5bISJ4L8mO9atv3aCVM=
Subject key identifier:   AC:B8:30:66:4C:DF:EB:67:F3:7C:87:C5:CB:EF:12:E6:33:40:CE:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F055BC0F28327062754E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        173.71.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:55:bc:0f:28:32:70:62:75:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=83945228-8beb-4065-9c41-8d13daa58293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:df:01:61:c4:6e:3c:17:d8:89:7a:9a:69:
                    cc:13:36:2f:c3:27:d1:59:ce:c0:02:cf:a7:cb:36:
                    b9:ac:0b:58:8c:9e:71:32:9f:13:da:be:a3:cc:b1:
                    ab:42:de:2b:47:7e:53:db:c6:7c:e0:ed:c5:25:d5:
                    10:ce:ba:70:eb:53:d1:8b:9a:e2:fe:a0:7f:66:3b:
                    e1:9b:98:00:ce:bf:7e:88:93:e1:1b:18:29:07:df:
                    92:68:4d:f6:76:b8:de:7c:f0:84:12:1e:5f:a2:b6:
                    98:70:e0:2c:32:08:a2:84:26:1c:53:7f:94:34:4c:
                    8c:95:91:7a:ca:49:21:01:07:a8:e4:db:33:e2:a5:
                    95:17:fb:97:3f:78:83:75:8e:a1:9a:94:0e:d1:de:
                    0f:5d:51:b8:78:fc:09:e9:6e:df:2d:2d:f5:b9:43:
                    8b:d3:e6:86:24:95:24:7d:56:b0:6e:2a:6c:9f:cb:
                    20:28:a2:ca:ae:08:12:46:97:de:6a:26:7a:30:f1:
                    d8:96:ce:eb:96:9d:ab:35:e1:30:c1:d6:63:10:bd:
                    28:ad:a7:2d:e0:52:ea:f3:88:62:f5:6b:12:63:14:
                    4e:30:a8:be:9a:9f:36:2f:31:c2:46:29:32:a4:ea:
                    0b:78:69:37:17:cf:68:b5:e5:f3:85:92:27:10:ed:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:30:66:4C:DF:EB:67:F3:7C:87:C5:CB:EF:12:E6:33:40:CE:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65d13b94-4668-32fe-a649-06eebd3ad2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.71.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:cd:48:64:0e:8f:7d:6e:4a:aa:23:f7:81:71:9f:27:1b:
         bd:6b:16:48:66:e1:75:47:5f:80:80:49:ad:22:33:1e:b5:5c:
         05:37:62:78:2d:84:df:fd:b3:0f:3d:f1:9a:7e:ac:a5:b4:74:
         cb:26:de:fa:44:cb:b7:7d:ef:44:ee:7d:f6:20:2d:95:71:a4:
         3c:b8:a4:97:2b:d4:e7:14:51:de:9f:e6:21:1c:cb:de:96:4e:
         32:d6:e1:09:62:45:3b:48:f9:7a:de:68:b4:0d:0f:c0:2c:65:
         21:15:56:56:6f:88:83:59:f1:c9:1e:6e:98:42:e6:cf:b9:e2:
         91:10:94:27:ae:59:c7:72:c2:bd:4a:e6:fe:dd:0b:53:32:33:
         f9:88:38:80:6c:5b:82:3d:d3:31:e0:b9:4f:dd:67:b8:fa:ac:
         5f:7f:04:a4:7b:88:80:fc:c2:3b:96:48:f3:19:28:24:d1:a0:
         09:20:29:86:ad:1c:92:04:df:2b:82:c5:52:9b:ca:6a:db:c6:
         72:62:07:ae:0e:0d:06:f4:a9:ac:b0:25:bb:a8:a9:4f:c2:93:
         a1:cd:ce:32:97:9e:b8:9c:01:43:08:82:0a:28:55:ef:b6:52:
         bb:93:ca:a2:98:11:9b:52:5b:c8:fb:40:3e:66:35:ba:a5:f8:
         b9:c6:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:01 2025 by rpki-client